AMENDMENTS TO THE CLAIMS 
Amended claims follow: 

1 . (Currently Amended) A method of capturing and selectively analyzing data 
frames transmitted between stations in a communications network utilizing tunneling 
protocols, comprising: 

establishing a connection with a communications network; 

receiving, in real-time, data frames transmitted in the communications network, 
wherein the data frames are communicated utilizing tunneling; and 

analyzing the data frames that are communicated utilizing the tunneling; 

wherein the analyzing is conditionally performed for one or more types of tunnels 
associated with the tunneling based on user input; 

wherein multiple objects generated bv a plurality of protocol interpreters are 
linked to logically portray a relationship between endpoints of a tunnel and stations 
conversing inside the tunnel . 

2. (Currently Amended) The method as recited in claim 1 , wherein the tunneling 
involves [[a]] the tunnel. 

3. (Original) The method as recited in claim 2, wherein the tunnel includes an 
Internet Protocol (IP) tunnel. 

4. (Original) The method as recited in claim 2, wherein the tunnel includes a General 
Packet Radio Service (GPRS) Tunnel Protocol (GTP) tunnel. 

5. (Original) The method as recited in claim 2, wherein the tunnel includes a Generic 
Routing Encapsulation (GRE) tunnel. 



6.-9. (Cancelled) 
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1 0. (Currently Amended) The method as recited in claim 1 , wherein the analyzing 
includes executing [[a]]the plurality of protocol interpreters. 

1 1 . (Previously Presented) The method as recited in claim 1 0, wherein the plurality of 
protocol interpreters include an Internet Protocol (IP) protocol interpreter. 

12. (Original) The method as recited in claim 1 1, wherein the IP protocol interpreter 
is re-executed to accommodate the tunneling. 

1 3. (Previously Presented) The method as recited in claim 10, wherein the plurality of 
protocol interpreters generate at least one object. 

14. (Currently Amended) A computer program product embodied on a computer 
readable medium of capturing and s e lectively analyzing data frames transmitt e d b e tw ee n 
stations in a communications n e twork utilizing tunneling protocols , comprising: 

computer code for establishing a connection with a communications network; 

computer code for receiving, in real-time, data frames transmitted in the 
communications network, wherein the data frames are communicated utilizing tunneling; 
and 

computer code for analyzing the data frames that are communicated utilizin g the 
tunneling; 

wherein the computer program product is operable such that the analyzing is 
conditionally performed for one or more types of tunnels associated with the tunneling 
based on user input A 

wherein the computer program product is operable such that multiple objects 
generated by a plurality of protocol interpreters are linked to logically portray a 
relationship between endpoints of a tunnel and stations conversing inside the tunnel . 

1 5. (Currently Amended) The computer program product as recited in claim 14, 
wherein the tunneling involves [[a]]the tunnel. 
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1 6. (Original) The computer program product as recited in claim 1 5, wherein the 
tunnel includes an Internet Protocol (IP) tunnel. 

1 7. (Original) The computer program product as recited in claim 1 5, wherein the 
tunnel includes a General Packet Radio Service (GPRS) Tunnel Protocol (GTP) tunnel. 

1 8. (Original) The computer program product as recited in claim 1 5, wherein the 
tunnel includes a Generic Routing Encapsulation (GRE) tunnel. 

19. -22. (Cancelled) 

23. (Currently Amended) The computer program product as recited in claim 14, 
wherein the analyzing includes executing [[a]]the plurality of protocol interpreters. 

24. (Previously Presented) The computer program product as recited in claim 23, 
wherein the plurality of protocol interpreters include an Internet Protocol (IP) protocol 
interpreter. 

25. (Original) The computer program product as recited in claim 24, wherein the IP 
protocol interpreter is re-executed to accommodate the tunneling. 

26. (Previously Presented) The computer program product as recited in claim 23, 
wherein the plurality of protocol interpreters generate at least one object. 

27. (Original) The computer program product as recited in claim 26, wherein statistics 
associated with the objects are displayed via a user interface. 

28. (Currently Amended) A computer-implemented system for capturing and 
selectively analyzing data frames transmitted between stations in a communications 
network utilizing tunneling protocols , comprising: 
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a network analyzer coupled to a communications network for receiving, in real- 
time, data frames transmitted in the communications network, 

the data frames being communicated utilizing tunneling, 

wherein the system is operable such that the data frames that are communicated 
utilizing the tunneling are analyzed, the analysis conditionally performed for one or more 
types of tunnels associated with the tunneling based on user inputs 

wherein the system is operable such that multiple objects generated by a plurality 
of protocol interpreters are linked to logically portray a relationship between endpoints of 
a tunnel and stations conversing inside the tunnel . 

29. (Currently Amended) A graphical user interface for s e lective e nabling tho 
analysis of communications network utilizing tunneling protocols , comprising: 

a user interface for receiving input from a user; 
enabling a tunnel analysis based on the user input; 

wherein the tunnel analysis includes analyzing data frames that are communicated 
utilizing tunneling; 

wherein the graphical user interface is operable such that the analyzing is 
conditionally performed for one or more types of tunnels associated with the tunneling 
based on the user input; 

wherein the graphical user interface is operable such that multiple objects 
generated by a plurality of protocol interpreters are linked to logically portray a 
relationship between endpoints of a tunnel and stations conversing inside the tunnel . 

30. (Cancelled) 

3 1 . (Previously Presented) The method as recited in claim 13, wherein statistics and 
diagnosed failure conditions associated with the at least one object are displayed via a 
user interface. 



32. (Cancelled) 
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33. (Previously Presented) The method as recited in claim 13, wherein adverse 
conditions for the at least one object are diagnosed and presented in a detailed screen 
associated with the at least one object. 

34. (New) The method as recited in claim 1 , wherein byte counts distinguish between 
the stations conversing inside the tunnel and the endpoints of the tunnel. 

35. (New) The method as recited in claim 12, wherein the IP protocol interpreter is 
re-executed in a recursive manner. 



